CVE-2023-38677: FPE in paddle.linalg.eig
Published Jan 3, 2024
·Updated
FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
Affected Software
2 affected componentsFixes available
pip/paddlepaddle<2.6.0
2.6.0
PaddlePaddle paddlepaddle<2.6.0
Remediation
Event History
Jan 3, 2024
CVE Published
08:11 AM
Data Sourced
08:11 AM
DescriptionSeverityWeakness
Advisory Published
09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-38677?
CVE-2023-38677 is classified as a high severity vulnerability due to its potential to cause a runtime crash and denial of service.
2
How do I fix CVE-2023-38677?
To fix CVE-2023-38677, upgrade PaddlePaddle to version 2.6.0 or later.
3
What is the impact of CVE-2023-38677?
The impact of CVE-2023-38677 includes potential application crashes and loss of service availability.
4
Which versions of PaddlePaddle are affected by CVE-2023-38677?
PaddlePaddle versions before 2.6.0 are affected by CVE-2023-38677.
5
What component is vulnerable in CVE-2023-38677?
The vulnerable component in CVE-2023-38677 is the paddle.linalg.eig function in PaddlePaddle.